Multiple Choice
A CISO has recently joined an organization with a poorly implemented security program. The desire is to base the security program on a risk management approach. Which of the following is a foundational requirement in order to initiate this type of program?
A) A complete inventory of Information technology assets including infrastructure, networks, applications and data
B) A security organization that is adequately staffed to apply required mitigation strategies and regulatory compliance solutions
C) A clear set of security policies and procedures that are more concept-based than controls-based than controls-based
D) A clearly identified executive sponsor who will champion the effort to ensure organizational buy-in
Correct Answer:
Verified
Correct Answer:
Verified
Q277: The rate of change in technology increases
Q278: The exposure factor of a threat to
Q279: An organization's Information Security Policy is of
Q280: Scenario: You are the newly hired Chief
Q281: Which one of the following BEST describes
Q283: Scenario: Most industries require compliance with multiple
Q284: Creating good security metrics is essential for
Q285: After undergoing an external IT audit, George
Q286: Item 2If you come across a sheepdip
Q287: Jason has set up a honeypot environment